On Saturday, April 6, 2002, at 12:43 PM, Max Horn wrote:
> I don't think it's that silly. Think about it. There has been at least > one security hole in OS X (in NetInfo) in the past that could only be > exploited by local users to gain root. On my box, that's only me, so > almost no risk. On SF's compile farm, over 300,000 individuals have > access. Would you bet on the fact that there is no other similiar hole > left? It was actually an issue with how LaunchServices was implemented that caused problems with setuid GUI binaries, and it was NetInfo Manager.app not NetInfo itself. And actually you had to have local GUI access in order to get a root shell, I doubt 300,000 individuals have console access to SF's compile farm ;-) -- Finlay _______________________________________________ Fink-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/fink-devel